Privacy Policy
Last updated 24 September 2026
This explains what Sonorie collects, why, who else processes it, and how to get it back or deleted. It describes what the software actually does, not what a template says it might.
The short version
- No advertising, and nothing sold to data brokers. We measure traffic two ways: a cookie-free Cloudflare counter that identifies nobody, and Google Analytics — which runs only if you say yes, and never before. Session replay, which shows us what happened on a page when something broke, follows the same rule.
- We never sell or share your personal information, and we don’t train models on your content.
- We learn from how generations go. We record how each build behaved and what you did with the result, and from 16 September 2026 we keep the prompts behind them so we can read what went wrong when a build fails. You can switch that off on your account page — see improving generation.
- When something breaks, we get an error report through Sentry, with passwords, tokens and cookies removed first.
- Your prompts go to inference providers so they can be processed. That is the main way your data leaves us — see who processes your data.
- We never see your card details. Stripe handles payments on its own pages.
Who we are
Sonorie is a service for building audio plugins by describing them. For data protection purposes we are the controller of the personal data described here. The operator is MIMOSA SOLUTIONS LLC.
Privacy questions and requests: [email protected].
What we collect
Account information
Your email address, an optional display name, and — if you sign up with a password — a bcrypt hash of it. We never store the password itself. If you sign in with Google we receive and store your Google account identifier, email address, whether Google has verified it, and your name; we do not receive your Google password and we ask for no other Google data. If you enable two-factor authentication we store the secret needed to verify your codes and hashes of your backup codes.
What you create
Your prompts and chat history, any images you attach, the plugins generated for you (DSP source, interface code, parameters), your project titles, and the version history of each project. Any thumbs up or down you give a result, and the reason you picked. If you publish to the marketplace, your listing text and the plugin snapshot behind it. If you write a review, its rating and text, shown publicly with your name.
Billing and usage
Your plan, subscription status, and the Stripe customer and subscription identifiers that link you to your payments. Purchases, top-ups and licences issued to you. Usage records for each generation: which route it took, whether it succeeded, how long it took, how many tokens it used and what it cost. Card numbers never reach us— payment details are entered on Stripe’s own pages.
Welcome questions
After you subscribe we ask a few questions, once: how you found Sonorie and, if you choose to say, which channel, forum or account; what you make; how much you work with plugins; what you want to build first; and whether you opened our Discord invite (we only know you clicked it, not whether you joined). Every question is optional and can be skipped, or the whole thing closed. We use the answers to understand which channels bring people to Sonorie and what they come to build. They are never shared or used for advertising.
Improving generation
For each generation we record how our pipeline behaved — how long it took, what it cost, the automated checks it ran on the plugin and, if the build failed, why — and what became of the result: whether you undid it, exported it, published it, rated it, or its interface stopped working in the preview. None of that contains anything you wrote.
From 16 September 2026 we also keep a copy of the prompt behind each generation and the name of the plugin it produced. When a build fails, or you rate it poorly, or undo it, we read what was asked so we can find out what went wrong and fix it — and a request that keeps failing may be rewritten into one of the test cases we check every change against. This copy is read by us to improve Sonorie. It is never used to train AI models, never shared, and deleted after 12 months.
You can object to this at any time with the Help improve Sonorie switch on your account page. Turning it off stops prompts being kept and deletes the ones we already have. It does not touch your projects: your chat history stays exactly where it is, because that copy is how the studio works, not how we improve it.
Errors and session replay
When something breaks — in your browser or on our servers — an error report goes to Sentry, our error-monitoring provider: what failed and where in our code, the address of the page, your browser and device type, and for failures on our servers, which part of the service was handling the request. Passwords, tokens, cookies and keys are stripped from a report before it is sent. Error reports store nothing on your device and are sent for everyone, because a service nobody can debug is a service that stays broken.
Session replay runs only if you accept analytics. It records how a page changed — its layout, clicks and navigation — so we can see what led up to an error. Every piece of text is masked before it leaves your browser and images and media are blocked, so a replay shows the shape of the page, not what you typed or read. We record about one visit in ten, and visits where an error happens. Refuse analytics, or withdraw consent later, and recording stops straight away.
Sign-in sessions
For each active session we store a hash of the session token, when it expires, and the browser user-agent string captured when you signed in. The last of those exists for one reason: so the security page can show you a recognisable list of your signed-in devices and you can end any you don’t recognise.
IP addresses
Your IP address is used transiently, in memory, to rate-limit sign-in and account actions so nobody can brute-force your account. We do not write IP addresses to our database. Cloudflare, which delivers and protects the site, necessarily sees the IP of every request as part of doing that, and processes it under its own terms. Sentry may likewise receive the IP address of a browser that sends it an error report.
What we do not collect
No advertising or analytics identifiers, no cross-site tracking, no behavioural profiling, no location beyond the coarse country your network implies, and no special-category data. We do not buy data about you from anyone.
Why we use it, and our legal basis
For anyone in the UK, EU or Switzerland, the GDPR requires us to name a lawful basis for each purpose:
| Purpose | Data | Legal basis |
|---|---|---|
| Running your account and generating plugins | Account details, prompts, projects, generated code | Performance of our contract with you |
| Taking payment, managing subscriptions and marketplace payouts | Billing identifiers, purchases, usage totals | Performance of a contract; legal obligation for tax records |
| Service emails — verification, password resets, receipts, security alerts | Email address, the relevant event | Performance of a contract; legitimate interest in account security |
| Keeping accounts secure and preventing abuse | IP address (transiently), user-agent, rate-limit counters | Legitimate interest in protecting users and the service |
| Improving the quality, reliability and cost of generations | Generation metrics and outcomes, your ratings, and — from 16 September 2026 unless you switch it off — your prompts and plugin names | Legitimate interest in providing a service that works. You can object to prompts being kept with the switch on your account page |
| Understanding how people find Sonorie and what they come to make | Your answers to the optional welcome questions | Legitimate interest in knowing which channels bring us customers and what to build next. Every question can be skipped |
| Finding and fixing errors | Error reports: technical details, page address, browser and device type, IP address | Legitimate interest in operating a working, secure service |
| Session replay | Recordings of page layout and interaction, with all text masked | Your consent, which you can withdraw at any time |
| Meeting legal and accounting obligations | Invoices and transaction records | Legal obligation |
Where we rely on legitimate interests, we have considered your rights and use the least data that achieves the purpose — which is why, for example, rate limiting keeps IP addresses in memory instead of logging them.
Who processes your data
We use a small number of providers to run the service. Each acts on our instructions under a data-processing agreement, and each receives only what its job needs.
| Provider | What it does | What it receives |
|---|---|---|
| Inference providers | Run the compute behind plugin generation | Your prompt text, attached images, conversation context, generated code |
| Stripe | Payments, subscriptions, marketplace payouts | Email, name, an internal user id, and your payment details, which you give directly to Stripe |
| Resend | Sends transactional email | Your email address and the content of that message |
| Sentry (Functional Software, Inc.) | Error monitoring, and session replay if you accept analytics | Error reports (technical details, page address, browser and device type, IP address) and replays with all text masked |
| Sign in with Google — only if you use it | The sign-in exchange itself; Google returns your identifier, email and name | |
| Cloudflare | Delivers and protects the site; stores compiled build artifacts | Request metadata including your IP address; plugin binaries, which hold no personal data |
| Our database and server hosting | Stores everything described above | All account, project and billing data |
| Our compile and build workers | Compile generated C++ into a preview or a plugin binary | The generated source code only |
A word about prompts. The content you type is sent to third-party inference providers so it can be processed, and they handle it under their own terms and retention policies. Which providers we use changes over time; they are currently located in the United States and China. We don’t list them by name here because that list would be out of date within months, but it isn’t a secret — ask us and we will tell you which providers are handling your data. Please don’t put personal, confidential or client-sensitive information into a prompt. You don’t need to in order to describe a compressor, and it is the one part of this policy where your own habits matter more than our controls.
Beyond these providers, we disclose personal data only where the law requires it, to establish or defend legal claims, or — with notice to you where we’re allowed to give it — if the business is ever transferred to another owner. We do not sell personal information and we do not share it for advertising.
International transfers
Our providers operate outside the UK, EEA and Switzerland, including in the United States and China. Where personal data is transferred out of those regions we rely on the European Commission’s Standard Contractual Clauses and the UK Addendum, together with the provider’s own safeguards. Not every destination has been found by the Commission to offer an equivalent level of protection — which is the practical reason for the caution about prompt content above.
How long we keep it
| Data | Kept for |
|---|---|
| Account details | While your account exists, then deleted on closure |
| Projects, chat history, generated code | Until you delete them, or until the account is closed |
| Sign-in sessions | 30 days, or until you sign out or revoke the device |
| Generation job records | 14 days, then swept automatically |
| Usage and cost records | Up to 24 months, for billing accuracy and capacity planning |
| Generation analytics — metrics, outcomes and ratings | 24 months |
| Answers to the welcome questions | While your account exists, then deleted with it |
| Prompts kept for improving generation | 12 months, or sooner if you switch off Help improve Sonorie, delete the project or close your account |
| Error reports and session replays | Up to 90 days, at Sentry |
| Invoices, purchases and payouts | As long as tax and accounting law requires, typically 6–10 years |
| Marketplace licences | For the life of the licence, so buyers can re-activate a plugin they bought |
How we protect it
Passwords are hashed with bcrypt and never stored in the clear. Session tokens are stored only as hashes, so a copy of our database does not yield working sessions. Traffic is HTTPS-only with HSTS. Sign-in and account actions are rate-limited, and password checks take the same time whether or not the account exists, so they can’t be used to discover who has an account. Model-generated code is compiled in an isolated, hardened service and runs in the browser inside a sandboxed frame that cannot reach the network. Two-factor authentication is available and we recommend it.
No system is perfectly secure. If we ever suffer a breach affecting your personal data, we will notify you and the relevant regulator as the law requires.
Your rights
Depending on where you live you may have the right to access your data, correct it, delete it, receive a portable copy, restrict or object to certain processing, and withdraw consent where we relied on it. If you are in California or a similar US state, you have the right to know, delete and correct, and the right to opt out of sale or sharing — which we can satisfy immediately, because we do neither. We will not discriminate against you for exercising any of these rights.
Some of it you can do yourself, right now:
- Change your name, email or password on the account page.
- Review and revoke signed-in devices on the security page.
- Delete individual projects from the studio.
- Stop your prompts being kept to improve generation, and delete the ones already kept, with the Help improve Sonorie switch on the account page.
- Refuse or withdraw consent to analytics and session replay (below).
- Manage or cancel your subscription through the billing portal.
For account deletion or a copy of your data, email [email protected] from your account address and we will action it within 30 days. Deleting your account removes your projects, chat history, generated code, sessions, usage records and generation analytics; we keep billing records where tax law requires it, and marketplace purchase and licence records so that people who bought from you keep working plugins.
If you think we have handled your data badly, please tell us first — but you also have the right to complain to your data protection authority. In the EU that is the supervisory authority where you live or work; in the UK, the Information Commissioner’s Office; in Switzerland, the Federal Data Protection and Information Commissioner.
Cookies and local storage
Sonorie sets three strictly necessary cookies to sign you in and keep the sign-in flow safe. Those always run: blocking them would simply stop you being able to sign in, so there is no choice to offer about them.
| Cookie | Purpose | Expires |
|---|---|---|
sonore_session | Keeps you signed in. Holds a random token; the server stores only its hash. | 30 days |
sonore_2fa | Bridges the gap between your password and your two-factor code. | 10 minutes |
sonore_oauth | Protects the Google sign-in exchange against forgery and interception. | 10 minutes |
All three are HttpOnly, restricted to our own site with SameSite=Lax, and sent only over HTTPS in production. That means no script — ours or anyone else’s — can read them.
Analytics
We measure how the site is used in two ways, and they are treated differently because they are different things.
Cloudflare Web Analyticsruns for everyone. It sets no cookie and stores nothing on your device — it counts page views without building any profile of who you are, so there is nothing to consent to and nothing you could usefully refuse. It is the reason our traffic figures are honest rather than being “whatever the people who accepted happened to do”.
Google Analytics (loaded via Google Tag Manager) and session replay run only if you accept analytics. Refuse, or ignore the banner, and the script is never loaded at all — not loaded-then-muted, not loaded in a restricted mode. It is not there. Accepting sets these cookies:
| Cookie | Purpose | Expires |
|---|---|---|
_ga | Google Analytics: tells returning visits apart from new ones. | 2 years |
_ga_<id> | Google Analytics: keeps the current session together. | 2 years |
Google LLC processes this data as our processor, which means it leaves the EU and is handled in the United States under the EU–US Data Privacy Framework and Standard Contractual Clauses. We switch on IP anonymisation, we do not run Google Signals, advertising features or cross-device tracking, and we do not use this data to build advertising audiences.
You can change your mind at any time, and it takes effect straight away — refusing after having accepted also deletes the _ga cookies from your browser rather than merely stopping new ones.
You haven’t answered yet, so neither Google Analytics nor session replay is running.
We also keep a few things in your browser’s storage. The preferences never leave your device. sonore-ref and sonore-attr do: they are read once, when you create an account, and then they stop mattering. The replay key exists only if you accepted analytics, and travels with the replay it belongs to.
| Key | What it remembers |
|---|---|
sonorie-theme | Light or dark, if you chose one explicitly |
sonore-store | Studio preferences such as output level |
sonore-cart | What’s in your marketplace cart |
sonore-pending-prompt | A prompt you typed before signing up, so it survives the redirect. Expires after 24 hours. |
sonorie-cookie-notice | That you dismissed the cookie notice, so we don’t show it again |
sentryReplaySession | Only if you accept analytics: ties together the parts of one session replay. Kept in session storage, so it is gone when you close the tab. |
sonore-ref | Which member’s invite link brought you, so they get credit if you sign up. Sent to us once, at signup. Expires after 90 days. |
sonore-attr | Which advert brought you — for example a campaign name from the link, or a Google or Meta click id. We use it to tell which of our own adverts are worth paying for. It is a first-party record: no advertising network can read it, we set no advertising cookie, and it is sent to us once, at signup. Expires after 30 days. |
You can clear all of it at any time through your browser’s settings. Clearing it signs you out and resets your preferences; nothing else is lost.
Children
Sonorie is not for people under 18. We don’t knowingly collect their personal data, and if we learn we have, we delete it. If you believe a child has given us information, please email [email protected].
Changes to this policy
If we change what we collect or who processes it, we will update this page and change the date at the top. For material changes we will tell you by email or in the app before they take effect. If we ever add a service that is not strictly necessary — analytics, for example — we will ask for your consent first rather than assume it.
Contact
[email protected] for anything in this policy, or [email protected] for everything else.
MIMOSA SOLUTIONS LLC
See also our Terms of Service.